Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: DbQ9Q7Mtx0uNy+L7wtWm8NBw+n+Jcx1Ja9lvQ6vgN6M=
Subject key identifier: 18:DE:36:11:27:08:FA:36:F5:CB:9C:97:EF:C5:01:1C:0D:AB:88:E2
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 019D26CD8DDD5D98A064DFCAAC50A9F8E9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 02B1
Signing time: Wed 25 Mar 2026 21:01:38 +0000
Manifest this update: Wed 25 Mar 2026 21:01:38 +0000
Manifest next update: Thu 26 Mar 2026 21:01:38 +0000
Files and hashes: 1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: 069JnGK26UQ6+0qxI1DAlLQOamiRExxbe6QQsJxbmXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:8d:dd:5d:98:a0:64:df:ca:ac:50:a9:f8:e9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Mar 25 21:01:38 2026 GMT
Not After : Mar 26 21:01:38 2026 GMT
Subject: CN=18de36112708fa36f5cb9c97efc5011c0dab88e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:5d:7d:35:e6:3f:b9:80:fa:6c:b9:43:e6:
ad:1a:cf:ec:38:1e:fa:0b:8c:4b:64:46:db:71:2c:
e1:5c:fc:81:43:e7:4f:21:17:99:a5:f7:56:3e:a3:
4f:03:21:e4:c6:67:bc:98:49:a1:fd:fd:b1:94:2f:
26:36:f2:ad:a6:38:0c:b2:2e:a5:2a:d6:09:e5:25:
e0:b2:2f:29:af:5b:50:e0:0c:3a:2f:0c:83:2a:d3:
df:2f:da:5c:18:89:e7:54:f0:37:f4:8c:b0:43:4f:
77:8c:29:08:98:b6:54:6a:c3:7e:11:77:63:41:99:
1c:87:83:e8:2c:98:ce:dc:ab:ec:5a:95:f3:b0:e9:
e9:51:39:2a:8a:e7:9a:78:5d:de:3b:1d:96:f8:eb:
80:e5:a6:61:eb:77:80:6b:d0:66:08:15:41:73:a3:
3c:d0:4b:72:86:c1:85:d8:f5:a4:a6:9a:83:df:89:
68:ec:13:07:37:a3:f6:0e:61:72:d1:c0:50:2a:45:
5e:21:bf:97:f9:27:d6:95:d7:7a:bb:ec:3b:51:74:
e7:1c:21:45:e8:ac:7d:4a:29:b7:da:4b:1b:98:11:
b4:f7:e3:cc:45:04:28:7d:df:5d:61:5a:bb:c3:e1:
05:5a:33:90:d0:90:80:13:a3:07:98:e1:ec:d9:b7:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DE:36:11:27:08:FA:36:F5:CB:9C:97:EF:C5:01:1C:0D:AB:88:E2
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3a:fd:a9:31:b7:24:b0:7d:25:13:7d:ab:89:71:cc:89:1a:
db:91:f2:a2:d9:4b:7b:85:43:34:e0:c5:23:50:1c:b5:6a:1f:
1f:d9:61:da:2b:55:c9:2c:48:8d:43:fe:1c:90:aa:d7:93:e5:
2a:2b:b2:63:f6:80:66:77:0b:0d:71:a1:a1:9f:9e:4e:71:f8:
80:38:e5:22:f9:68:38:b0:71:14:8a:69:a7:e6:80:11:51:80:
61:f7:e3:21:17:4c:eb:1d:47:b0:95:3e:7a:31:11:4a:95:72:
d9:11:77:90:fa:a1:5b:9a:f8:a6:8f:31:bd:7f:d2:0f:80:b3:
c6:24:73:1f:f0:8f:64:dd:ed:9d:8e:7e:7d:07:6f:de:2b:93:
56:18:28:ce:33:b5:d4:dc:e4:73:55:00:95:81:c0:e7:7f:c5:
98:92:6f:67:48:8b:dd:10:46:28:af:ae:5b:43:20:e3:9b:21:
db:47:f2:6b:37:24:a7:0d:a7:8f:ed:c3:19:5d:a0:b4:1b:6c:
29:89:bf:31:56:75:3d:df:86:b3:6f:27:df:f2:da:dd:b9:71:
40:fb:78:6a:40:df:bf:29:70:b0:88:9c:bb:06:99:1d:9c:d4:
a7:06:98:0d:63:73:56:6a:d6:2f:cb:e3:5a:51:99:d9:3f:2e:
03:56:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:19 2026 by rpki-client